Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41FdROoARSPu02E7LRLpX0TYEg0.cer
File:                     41FdROoARSPu02E7LRLpX0TYEg0.cer (raw, json)
Hash identifier:          FtTE/Nfv8aJdJGTMg4UFb/LMsSwECehkJBNuzByX4Qs=
Subject key identifier:   E3:51:5D:44:EA:00:45:23:EE:D3:61:3B:2D:12:E9:5F:44:D8:12:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       0185701E3CED3009C3F1233A14732AA1C395
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/47/3ac16c-e979-419a-a43b-8d1a783d1910/1/41FdROoARSPu02E7LRLpX0TYEg0.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/47/3ac16c-e979-419a-a43b-8d1a783d1910/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 01:35:08 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    AS: 48232

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:1e:3c:ed:30:09:c3:f1:23:3a:14:73:2a:a1:c3:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 01:35:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e3515d44ea004523eed3613b2d12e95f44d8120d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d8:64:b4:2b:09:20:4c:8a:a0:e8:3d:f0:99:
                    2b:06:18:99:a0:8c:f3:c2:71:36:35:19:21:6b:c5:
                    fd:8d:fb:25:dd:1e:2d:6a:ab:a1:e1:ed:6a:9b:7c:
                    4e:0a:15:2b:e4:16:ca:61:8a:16:d4:fa:7d:57:35:
                    8f:92:2c:4b:ed:1e:52:08:16:0b:f9:0d:4f:19:e5:
                    af:3e:69:0e:67:01:75:9d:32:96:8b:a1:44:57:bb:
                    ba:01:b2:19:a7:9d:b0:82:ca:bb:0d:5a:c0:69:e5:
                    6a:e0:36:d3:23:58:8b:ec:eb:99:79:5f:de:28:10:
                    b2:59:af:56:3c:c5:4f:9f:7e:ea:cd:49:09:e1:80:
                    e1:cd:b0:66:d8:09:3e:eb:2d:00:fc:2a:54:34:c6:
                    d3:f6:7d:4d:1b:f7:ab:54:f0:bd:d0:42:0a:e6:79:
                    31:66:a5:36:15:ee:73:19:d3:e6:30:8d:cd:3f:ba:
                    58:56:f3:55:48:69:41:29:5f:40:e2:db:6b:d4:87:
                    b1:7d:73:b1:40:d9:3d:42:cd:5a:e7:c7:e5:78:5d:
                    92:7f:43:a2:6c:01:20:62:b4:42:22:d8:13:b3:95:
                    4f:c4:1c:23:1f:c7:57:c9:63:f1:e9:89:ba:ea:bc:
                    65:a7:eb:50:d9:77:97:36:37:48:9e:f0:97:a1:89:
                    18:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:51:5D:44:EA:00:45:23:EE:D3:61:3B:2D:12:E9:5F:44:D8:12:0D
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/3ac16c-e979-419a-a43b-8d1a783d1910/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/3ac16c-e979-419a-a43b-8d1a783d1910/1/41FdROoARSPu02E7LRLpX0TYEg0.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48232

    Signature Algorithm: sha256WithRSAEncryption
         7f:1a:e4:ab:13:d2:f8:58:30:a9:05:ba:5a:a4:50:ae:58:4d:
         ee:c7:89:cf:2d:3d:36:d4:d7:c0:a8:ea:d4:ee:05:e6:58:af:
         70:dd:3b:85:fa:4c:a2:d6:c8:bb:9a:76:7a:78:d0:4c:f1:fc:
         29:b3:a9:ff:3b:d2:2b:f1:f6:b3:11:1d:25:fb:07:8f:66:5c:
         c0:0a:6a:d1:2b:61:d8:9e:74:43:91:9e:0b:ba:26:4e:39:5f:
         50:46:e2:36:fa:50:e4:f3:f6:5a:e5:a8:4b:d8:2e:7d:89:0a:
         77:5e:b9:95:28:c0:15:1e:5b:8d:5d:29:2a:fc:b1:95:f9:44:
         72:10:c1:19:ff:de:62:cc:3e:1d:1b:a0:84:cb:b8:19:5d:f4:
         1e:ac:ae:41:13:b4:5e:87:16:ee:6d:89:a0:ea:34:b7:40:db:
         b8:cd:4d:33:42:14:80:15:07:82:22:8f:9e:c6:cd:03:a5:3c:
         76:4c:02:e0:73:17:c3:44:4a:34:f3:38:7e:51:a3:ad:32:96:
         3c:37:1f:41:84:dc:72:13:1d:1f:14:96:c5:04:a1:6a:85:1b:
         f8:18:dc:2f:c0:17:13:f4:e5:b0:d5:99:44:ea:30:a1:81:0d:
         dc:c2:6c:96:03:87:10:05:70:d0:d8:a7:50:6d:ba:88:b7:2c:
         cd:3f:4d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----